IoT/IIoT Device Management , Cybersecurity , IT-OT Convergence

Robust Incident Management for Critical Infrastructure

Managing legacy systems and emerging cyberthreats is crucial for safeguarding critical infrastructure. Durgesh Kalya, OT network security expert at Covestro LLC, stressed the importance of integrating the incident command system, originally developed by the Federal Emergency Management Agency and the Department of Homeland Security, with industrial automation systems. This integration facilitates active participation and collaboration among industry stakeholders, he said.

See Also: 2024 Gartner® Magic Quadrant™ for Security Service Edge (SSE)

By knowing what systems they have and how to manage and update them, companies can enhance their protection and reduce risks, especially when critical systems run on outdated software such as Windows 95 or Windows NT.

"Everyone essentially is a cybersecurity engineer because they're working on computer systems. You cannot update the software on hardware that is decades old; you need the latest hardware and equipment," he said.

In this video interview with Information Security Media Group at the Cyber Security for Critical Assets USA Summit in Houston, Kalya also discussed:

• The need for robust incident management frameworks for critical infrastructure;
• Collaboration between organizations and ICS vendors to ensure timely upgrades;
• Understanding and segmenting systems to mitigate risks associated with ransomware.

Kalya is an OT security expert with nearly 20 years of experience in the manufacturing, engineering design and IT industries. He serves as director of safety and security at the International Society of Automation and the Internet of Things Security Foundation Houston Chapter.